Skip to content
OpenAdvisories
High · 7.1 CVE-2026-8918 EUVD-2026-38205GHSA-jjw4-7368-pw26

A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or…

Published Jun 22, 2026 · Updated Sep 17, 2026 · Assigned by ASUS

Description

A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or cause a system crash (BSOD) by bypassing the validation mechanism.Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Armoury Crate through 6.4.12 —

References